Closed zaqes closed 3 weeks ago
That's YARA rule management; not necessarily a task of the scanner. Furthermore, other YARA rule repos are often shit. They contain expensive rules or rules that trigger tons of FPs. So be careful using them.
That's true!
So update the list in UPDATE_URL_SIGS would be the best way forward at the moment?
Would be nice if this could be included. I guess I could just update the UPDATE_URL_SIGS with the URLs (?), but a command would be nice.